Skip to main content

Michigan researchers show how easy it is to hack trucks

Cybersecurity researchers have already shown how easy it is to hack a Jeep Cherokee and take control of its brakes and steering, resulting in a recall for the vulnerability to be corrected. At the Usenix Workshop on Offensive Technologies conference next week, a group of University of Michigan researchers plan to demonstrate how trucks, which have also begun adding similar electronic control system, can be vulnerable to hacking. They plan to show how the openness of the SAE J1939 standard used across
August 5, 2016 Read time: 2 mins
Cybersecurity researchers have already shown how easy it is to hack a 1957 Jeep Cherokee and take control of its brakes and steering, resulting in a recall for the vulnerability to be corrected.

At the Usenix Workshop on Offensive Technologies conference next week, a group of University of Michigan researchers plan to demonstrate how trucks, which have also begun adding similar electronic control system, can be vulnerable to hacking.

They plan to show how the openness of the SAE J1939 standard used across all US heavy vehicle industries gives easy access for safety-critical attacks and that these attacks aren't limited to one specific make, model, or industry.

They will test their attacks on a 2006 Class-8 semi tractor and 2001 school bus and demonstrate how simple it is to replicate the kinds of attacks used on consumer vehicles and that it is possible to use the same attack on other vehicles that use the SAE J1939 standard.

They will also show safety critical attacks that include the ability to accelerate a truck in motion, disable the driver's ability to accelerate, and disable the vehicle's engine brake. Their presentation concludes with a discussion of the possibilities of additional attacks and potential remote attack vectors.

Related Content

  • July 23, 2012
    Towards common standards for cooperative road infrastructures
    Michael Noblett of Connexis discusses international progress towards common standards for cooperative road infrastructures. Will vehicle safety communications standards be able to support ITS on the international level, or will we settle once again for regional interoperability only? The answer lies in the current status of the draft standards themselves, and the requirements users and authorities are placing on the people who draft them.
  • January 26, 2012
    Debating road user charging systems
    Are pre-launch trials of charging systems the way to improve public acceptance? Or is the real key a more robust political attitude? Here, leading system suppliers discuss the issue. The use of distance-based Road User Charging (RUC) is now well established, at least for heavy goods vehicles on strategic roads. However demand management for all vehicles, whether a distance-based charge or some form of cordon scheme, has yet to make significant progress. This is in spite of the logic and equity of RUC being
  • September 6, 2017
    Remote remedies help US authorities identify bridge deficiencies
    Every day 185 million vehicles – cars, trucks, school buses, emergency response units - cross one or more of America’s 55,710 'structurally compromised' steel and concrete road bridges, the highest concentration of which are in Iowa (nearly 5,000), Pennsylvania and Oklahoma. Nearly 2,000 of these crossings are located on interstate highways, according to the American Road and Transportation Builders Association's recent analysis of the US Department of Transportation's 2016 National Bridge Inventory.
  • November 6, 2017
    SwRI investigates cybersecurity weaknesses in transportation management systems
    Southwest Research Institute (SwRI), in San Antonio, has been awarded a $750,000 (£573,000) contract from the Transportation Research Board to help state and local agencies address cyber-attack risks on current transportation systems and those posed by future connected vehicles. Cyber security firm, Praetorian will support SwRI by conducting a security audit of traffic management systems and develop a web-based guide to help transportation agencies learn how to safeguard equipment.